after write_unlock_irq and just before read_lock, there's a small
window which enables a race causing deletion of the region struct in
function rh_update_states(). then in rh_dec(), the __rh_lookup()
will return null, causing kernel panic.